fix: escape invalid id's to prevent WSOD

Author: smeijer

src/lib/queryAdvise.js

@@ -6,9 +6,13 @@ export function getData({ root, element }) {
   const type = element.getAttribute('type');
   const tagName = element.tagName;
 
-  // prevent querySelector from tripping over corrupted html like <input id="button\n<button>
-  const id = (element.getAttribute('id') || '').split('\n')[0];
-  const labelElem = id ? root.querySelector(`[for="${id}"]`) : null;
+  // escape id to prevent querySelector from tripping over corrupted html like:
+  //   <input id="button\n<button> & <input id=\ntype="text" />
+  const id = (element.getAttribute('id') || '')
+    .replace(/\s/g, '')
+    .replace(/"/g, '\\"');
+
+  const labelElem = root.querySelector(`[for="${id}"]`);
   const labelText = labelElem ? labelElem.innerText : null;
 
   return {